PUBLISHED BY Microsoft Press A Division of Microsoft Corporation One Microsoft Way Redmond, Washington 98052-6399 Copyright © 2008 by Ian McLean and Microsoft Corporation All rights reserved No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher Library of Congress Control Number: 2007934745 Printed and bound in the United States of America QWT Distributed in Canada by H.B Fenn and Company Ltd A CIP catalogue record for this book is available from the British Library Microsoft Press books are available through booksellers and distributors worldwide For further information about international editions, contact your local Microsoft Corporation office or contact Microsoft Press International directly at fax (425) 936-7329 Visit our Web site at www.microsoft.com/mspress Send comments to tkinput@microsoft.com Microsoft, Microsoft Press, Active Directory, ActiveSync, ActiveX, Entourage, Excel, ForeFront, Groove, Internet Explorer, Outlook, PowerPoint, SharePoint, SQL Server, Windows, Windows Media, Windows Mobile, Windows NT, Windows PowerShell, Windows Server, and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries Other product and company names mentioned herein may be the trademarks of their respective owners The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred 7KLVERRNH[SUHVVHVWKHDXWKRU¶VYLHZVDnd opinions The information contained in this book is provided without any express, statutory, or implied warranties Neither the authors, Microsoft Corporation, nor its resellers, or distributors will be held liable for any damages caused or alleged to be caused either directly or indirectly by this book Acquisitions Editor: Ken Jones Developmental Editors: Jenny Moss Benson Project Editor: Maureen Zimmerman Editorial Production: S4 Carlisle Publishing Services Technical Reviewer: Bob Dean; Technical Review services provided by Content Master, a member of CM Group, Ltd Body Part No X14-06985 This book is dedicated to my first grandchild, Freya Isabella McLean, born September 5th, 2007 Welcome to the world, Freya —Ian McLean A deep and heartfelt thank you to the amazing team at Microsoft Press Your help, support, knowledge, and patience always make authors come up looking far more shiny than we are in real life! —Orin Thomas About the Authors Ian McLean Ian McLean, MCSE, MCITP, MCT, has 40 years’ experience in industry, commerce, and education He started his career as an electronics engineer before going into distance learning and then education as a university professor Currently he runs his own consultancy company Ian has written 20 books plus many papers and technical articles He has been working with Microsoft Exchange Server since 1999 Orin Thomas Orin Thomas is a Windows Security MVP, an author, and a systems administrator He has authored or co-authored more than a dozen books for Microsoft Press and is a contributing editor for Windows IT Pro magazine i Contents at a Glance 10 11 12 13 Preparing for Exchange Installation Installing Exchange Server and Configuring Server Roles 47 Configuring Recipients, Groups, and Mailboxes 117 Configuring Public Folders 183 Moving Mailboxes and Implementing Bulk Management 225 Spam, Viruses, and Compliance 291 Connectors and Connectivity 339 Policies and Public Folders 381 Monitoring 423 Message Tracking and Mailbox Health 505 Reporting 585 Configuring Disaster Recovery 643 Recovering Server Roles and Configuring High Availability 719 i Table of Contents Introduction xxiii Hardware Requirements xxiii Software Requirements xxiv Using the CD and DVD xxiv How to Install the Practice Tests xxv How to Use the Practice Tests xxv How to Uninstall the Practice Tests xxvii Microsoft Certified Professional Program xxvii Technical Support xxvii Preparing for Exchange Installation Before You Begin Lesson 1: Preparing the Infrastructure for Exchange Installation Preparing Active Directory Configuring Exchange Administrator Roles 11 Link State and Coexistence with Previous Versions of Exchange 12 Practice: Preparing the Network Infrastructure for the Installation of Exchange Server 2007 13 Lesson Summary .19 Lesson Review 19 Lesson 2: Preparing the Servers for Exchange Installation 22 Exchange 2007 Operating System and Hardware Requirements 22 Exchange Server 2007 on Domain Controllers 26 Networking Configuration 26 Security Configuration Wizard .27 The Exchange Best Practices Analyzer 28 What you think of this book? We want to hear from you! Microsoft is interested in hearing your feedback so we can continually improve our books and learning resources for you To participate in a brief online survey, please visit: www.microsoft.com/learning/booksurvey/ ix x Table of Contents Multiple Volumes 29 Practice: Preparing the Server for the Installation of Exchange Server 2007 31 Lesson Summary 39 Lesson Review 40 Chapter Review 42 Chapter Summary 42 Key Terms 42 Case Scenarios 43 Case Scenario 1: Preparing the Active Directory Environment and Network Infrastructure at Tailspintoys for Exchange Deployment 43 Case Scenario 2: Preparing a Windows Server 2003 Computer for Exchange Server Installation 43 Suggested Practices 44 Prepare the Infrastructure for Exchange Installation 44 Prepare Servers for Exchange Installation 44 Take a Practice Test 44 Installing Exchange Server and Configuring Server Roles 47 Before You Begin 47 Lesson 1: Installing Exchange Server 2007 49 Choosing the Appropriate Role or Roles for the Server 49 Preparing an Exchange Server 2007 Cluster 54 Load Balancing 54 Installing Exchange Server 2007 Using the GUI 55 Command-Line and Unattended Installations of Exchange Server 2007 57 Installing an Edge Transport Server 59 Postinstallation Tasks 60 Enter the Product Key 63 Installing Antivirus and Anti-spam 64 Securing Communication 65 Practice: Exchange Server 2007 Installation and Setup 67 Lesson Summary 79 Lesson Review 79 MSExchangeIS Public, counters Messaging and Security Feature Pack, 361, 394–95 Messaging Application Programming Interface (MAPI), 614 mailbox property setting, 128 RSG databases, 690 rule groups, rules, and reports, 615 Top Level Hierarchy (TLH), 188 messaging records management configuration, 313–15 Microsoft Antimalware engine, 64 Microsoft Auto Accept Agent, 167 Microsoft Certified Professional program, xxvii Microsoft Certified Technology Specialist (MCTS) exam, xxiii Microsoft Core XML Services (MSXML), Unified Messenger server role, 25 Microsoft Entourage See Entourage Microsoft Excel CSV file creation, 251, 277 mailbox report creation, 620 Microsoft Exchange Best Practices Analyzer See EXBPA (Exchange Best Practices Analyzer) Microsoft Exchange Information Store Mailbox (MSExchangeIS Mailbox), 446, 448, 576, 579 adding counters, 592 event viewing, 550 performance counters, 552–54 Microsoft Exchange Search Indexer, 398–99, 407, 653–54 Microsoft Exchange Security Groups, Microsoft Groove 2007 See Groove 2007 Microsoft Management Console (MMC), 14 Edge Transport installation, 59 Exchange Server 2007 requirements, 23 Microsoft Notepad, 251 Microsoft Office 2007 See Office 2007 Microsoft Office Diagnostics log, 473 Microsoft Office Outlook See Outlook Microsoft Office Sessions log, 473 Microsoft Operations Manager (MOM) 2005 Service Pack (SP1) Configuration Wizard, 614 mail queue management, 450–53 mailbox usage report creation, 612–16 product documentation, 589 report creation, 636, 638 server availability report creation, 589 server report creation, 588, 608 Microsoft SQL Server 2000, 450 MOM server report creation, 589 Microsoft SQL Server 2005, 450 MOM server report creation, 589 server report creation, 588 Microsoft SQL Server 2008, MOM server report creation, 589 841 Microsoft System Center Operations Manager 2007, server report creation, 588 middle initial e-mail address variable, 384 MinDevicePasswordLength parameter, 397 Minimum Password Length option, 397 MMC (Microsoft Management Console) See Microsoft Management Console (MMC) mobile devices Client Access server role, 109 connectors and connectivity, 339 Exchange connectivity, configuring, 89 ID extraction, ActiveSync, 359, 362 nonprovisional, 358 password policies, 396–97 policies configuration, 357–59, 394–97, 406, 418 remote wipe, 340 security, 340 Windows, Exchange Server 2007 synchronization, 359, 372–73 /mode, setup command See Setup /mode command ModifyPublicFolderACLrole assignment, 411 ModifyPublicFolderAdminACL role assignment, 411 ModifyPublicFolderDeletedItemRetention role assignment, 411 ModifyPublicFolderExpiry role assignment, 411 ModifyPublicFolderQuotas role assignment, 411 ModifyPublicFolderReplicaList, 411 monitoring, mail queues See mail queues, monitoring monitoring, system performance See system performance, monitoring Mount-Database cmdlet, 199 Move-ClusteredMailboxServer cmdlet, 672, 736, 737, 742–43 Move-Comment parameter, 743 Move-DatabasePath cmdlet, 739 Move-Mailbox cmdlet, 227–28, 36–39, 241, 242, 260, 435 dial tone recovery, 696 Exchange versions, 230 piping, 262 Move Mailbox Wizard, 227, 234–236, 243, 268 Exchange versions, 230 scheduling, 274 Move-OfflineAddressBook cmdlet, 392 Move-StorageGroupPath cmdlet, 739 Moved To folder, 681 MSExchange OWA object, 632 MSExchangeImap4 object, 576, 579 counters, 557, 558 MSExchangeIS Mailbox See Microsoft Exchange Information Store Mailbox (MSExchangeIS Mailbox) MSExchangeIS Public, counters, 592 842 MSExchangePop3 object MSExchangePop3 object, 576, 579 MSExchangeSearch See Microsoft Exchange Search Indexer MsgFolder table, 681 hard-deleted message recovery, 682 MSXML (Microsoft Core XML Services), Unified Messenger server role, 25 multiple volumes, Exchange Server 2007, 29–30 Multipurpose Internet Mail Extension (MIME), 300 attachment filtering, 301 MX records configuration, practice exercise, 38–39 Exchange configuration, 27 My Network Places, 192 My Workspace, 590 N Name parameter, public folder creation, 202 -ne filter operator, 438 NET common language run time, 270 NET Framework Active Directory schema preparation, Edge Transport installation, 59 Exchange Server 2007 requirements, 23 Exchange Troubleshooting Assistant, 484 hotfix, 31 MOM server report creation, 589 Windows Server 2008 features, 24 Netmon.exe See Network Monitor network configuration, Exchange Server 2007, 26–27 network connectivity, testing, 569–70 network counters, 467 network load balancing (NLB), 740, 747, 750 cluster, 55, 79, 87, 112, 740 Network Monitor, 497, 500 Capture window, 481, 487 captured data analysis, 481–84 capturing and viewing network data, 479–82 Network Monitor Driver, 479–80 versions, 479 Network Monitor 3, system performance monitoring, 484 Network Monitor, system performance monitoring, 478–84 Network News Transfer Protocol (NNTP), Exchange Server 2007 requirements, 23, 26 Network Service user account, 524 networks perimeter See perimeter networks protected, 50 unprotected, 50 New Accepted Domain Wizard, 85 New Distribution Group Wizard, 151, 158 New-DistributionGroup cmdlet, 152, 159 New-DynamicDistributionGroup cmdlet, 154 New E-mail Address Policy Wizard, 384 New-EmailAddressPolicy cmdlet, 384 New Mail Contact Wizard, 136 New Mail User Wizard, 131, 133 New-Mailbox cmdlet, 231, 247, 263 New-Mailbox command, 233 New Mailbox Wizard, 121–124, 168 no database displayed, 253 password display, 125 New-MailboxDatabase cmdlet, 246 New-Mailboxdatabase cmdlet, 693 New-MailContact, 137 New Offline Address Book Wizard, 389–90 New-OfflineAddressBook cmdlet, 392 New-PublicFolder cmdlet, 194 New-Publicfolder cmdlet, 409 New-PublicFolderDatabase, 199 New-StorageGroup cmdlet, 692–94 NewCMS parameter, 58 NLB (network load balancing) See network load balancing (NLB) NNTP (Network News Transfer Protocol) See Network News Transfer Protocol (NNTP) nodes See active node; passive node non-delivery report (NDR), 302, 431, 432, 434, 434–35, 447–48, 602, 626–27 Nonediting Author client role assignment, 412 Non_IPM_Subtree, 190 system folders, 191 nonprovisionable mobile devices, 358, 394–95 Norman Virus Control engine, 65 NoSelfSignedCertificates parameter, 58 Notype parameter, 605 nslookup command, 27 NTAccountOU parameter, 242 NTBackup, 647, 648, 663–67 Number of Failed Attempts Allowed option, 396 number of messages mailbox report creation, 619–21 O OAB (offline address book) See offline address book (OAB) Office 2007, collaboration, 184 Office Outlook See Outlook offline address book (OAB), 186, 389–92, 406 Autodiscover, 363–64 backups, 654, 656 folder, 190 offline backups, 705 performance thresholds offline status state, clustered mailbox server, 742 online database backup, 667, 702 online status state, clustered mailbox server, 742, 743 operating system 32-bit vs 64-bit, 2, 6, 39 installation, server recovery, 722 operating system requirements, Exchange Server 2007 installation preparation, 22–24 Operations Manager Command Shell, 590 organization change, mailbox moves, 228 organization name limitations, 9–8 symbols not allowed, /OrganizationName, setup command, 59 OrganizationName parameter, 58 OU parameters, 265 out-of-office policies configuration, 392–94, 406 practice exercise, 403–04 Outbox contents, 120 Outlook Client Access server role, 51 Mailbox server role, 51 public folder creation, 200–01 Outlook 2007 Availability service, 365 message classification, 316 Outlook Anywhere and Autodiscover, 364 remote domain out-of-office policies, 393–94 Outlook Anywhere, 108 Autodiscover, 363–64 configuration, 88–89 enabling, 89 Outlook Web Access (OWA), 630 ActiveSync, 357 calendar data access, 368 Client Access server role, 51 client protocol reporting, 630–32 client protocol reporting, Exchange Server Performance Monitor, 632 client protocol reporting, HTTPMon, 633 configuration, 89–92, 112 practice exercise, 104–06 mailbox move delays, 231 mailbox property setting, 128 message classification, 316 monitoring, 470 monitoring, HTTPMon, 474–75 OAB backup, 654 public folder access, 187–88 remote domain out-of-office policies, 393–94 ScratchPad folders, 191 Over option, 448–49 843 OWA (Outlook Web Access) See Outlook Web Access (OWA) Owner client role assignment, 412 P packets, vs frames, 478 Pages/Sec memory counter, 467, 468, 592 parameter values, spaces in, 194 parameters See specific parameters parity data, 30 partially online status state, clustered mailbox server, 742 Partner permission group, 343, 345 Partner Send connectors, 348 Passive Clustered Mailbox role, 53, 79, 112 passive node cluster continuous copy, 735–36 single copy clustering, 737, 739 password ActiveSync mailbox policies, 357 creation, mailbox, 233 device vs logon, 361 expiration, 68 policies, mobile devices, 396–97 practice exercise, 139 password changes OWA configuration, 91–92, 109, 112 practice exercise, 104–05 Password Expiration option, 397 password recovery configuration, 360–61 identity verification, 361 OWA, 357 password reset, Active Directory, 722 password security, CSV vs secure string, 233 $password variable, 125, 132 PasswordRecoveryEnabled parameter, 396 patches See Service Packs Path parameter, public folder creation, 202 Peak Client logons counter, 554 Perfmon.exe See Performance Logs and Alerts tool performance alerts See alerts performance counters See counters, monitoring Performance Data Helper library, 488 Performance Logs and Alerts tool, 448–49, 588, 608 client protocol reporting, 632 Reports view, 591–94 Performance Monitor See Exchange Server Performance Monitor performance thresholds exceeded, 468–70 monitoring, 468 844 Performance Troubleshooter tool setting, 467–70 Performance Troubleshooter tool, 485, 487–88, 588 database report creation, 599, 609 perimeter networks, 50 antivirus/anti-spam protection, 293 permission check, EXBPA, 29, 596–98 Permission Group parameter, 342–43 permission groups, Receive connectors, 342–43, 345–46 permissions mailbox moves See credentials, mailbox moves new message tracking log directory, 523 public folder management, 411–12, 418 configuration, practice exercise, 413–14 personal digital assistants See mobile devices personal folders (.pst), 185 phishing confidence level (PCL), 627 Pickup directory, submission queue, 426 ping (HTTPS request), 361–62, 373 pinging, 570 pipe function, 243, 286 piping, 262, 263 bulk management, 282 Export-Csv cmdlet, 604–05 Format-List command, 543 Get-Mailbox cmdlet, 260, 442, 542, 543–44 Get-MailboxStatistics cmdlet, 618 Get-User cmdlet, 544 Move-Mailbox cmdlet, 262 PowerShell event monitoring, 475–77 plain-text legal disclaimers, 327 Pocket PC 2002, 89 Pocket PC 2003, 89 poison message queue, 427–28, 428 POISONMESSAGE event classification, 510 policies, written, 314 policy configuration, 381, 382, 383 address books, 389–92 address lists, 387–89, 406 content indexing, 397–99 content indexing management, practice exercise, 405 e-mail address policies, 383–87, 406 e-mail address policy creation, practice exercise, 400–03 mobile device policies, 394–97, 406 out-of-office policies, 392–94, 406 out-of-office settings configuration, practice exercise, 403–04 written policies, 314 policy parameters, mailbox, 246, 247, 248–49, 250 policy settings, mailbox, 245–50 POP3 connectivity configuration, 366–68, 373, 377 connectivity configuration, practice exercise, 371–72 connectivity testing, 565–69, 565–70, 576 counters, 555–57 disabling, 368, 377 OWA configuration, 92–93 ports, 366 port 110, 366, 570 port 143, 366, 570 port 25, 570 port 50636, 84 port 993, 366 port 995, 366 portability, dial tone, 697 ports IMAP4, 366, 570 POP3, 366, 570 SMTP, 570 Post Office Proctocol version (POP3) See POP3 postmaster mailbox creation, 86 PowerShell Active Directory schema preparation, backup monitoring, 667 command output folder creation, 519 Edge Transport installation, 59 event log monitoring, 497, 500 Exchange Server 2007 requirements, 23 log, 473 message tracking, 491, 519–21 message tracking enabling/disabling, 521 message tracking log directory maximum size, 528 Operations Manager Command Shell, 590 POP3 and IMAP4 commands, 565–69, 579 protocol logging commands, 558 system performance monitoring, 470, 475–77 versions, Windows Server 2008 features, 24 PowerShell scripts, 282 backup monitoring, 667 bulk management, 268–70 creation, practice exercise, 278–79 CSV files, 272–73 event monitoring, 476–77 mail queue management, 430 mailbox moves, 245, 260 public folder management, 273–74 recipient management, 270–72 sample, 270 server report creation, 603 spam reporting, 628 practice test, 379 practice tests, 44–45, 115, 181, 223, 289, 338, 421, 503, 583, 641, 717, 753, xxiv installation and use, xxv–xxvii readiness checks premium journaling, 318, 319 /PrepareLegacyExchange Permissions command, PreserveMailboxSizeLimit parameter, 250 PrimarySmtpAddress parameter, 197, 207 Printer Troubleshooter, 465–66 private vs public computer, OWA access, 89–90, 93, 109 processor counters, 467 processor speed, 470 % Processor Time processor counter, 467, 468, 592 product key, 63–64 ProhibitPostQuota parameter, 205 ProhibitSendQuota parameter, 246, 249 ProhibitSendReceiveQuota parameter, 246, 249 prompt publishing server, 660, 661 properties, filterable, 631 protechnical support, xxvii–xxviii protocol logging configuration, 576 disabling, 561 external messages, 629–30 report creation, 630–33 Send/Receive connectors, enabling, 558–59 protocol logging management, 557–59 protocol logs backing up, Hub Transport server, practice exercise, 676–77 configuration, 560–63 fields, 564 interpretation, 563–66 naming conventions, 563 ProtocolLoggingLevel parameter, 485, 560 providers, shadow-copy backup, 668–69 provisioning, public folders, 185 proxy server, Forefront Security installation, 65 psConsoleFile, 274–75, 276 PSHome subdirectory, 268–69 public folder configuration, 183, 184, 185–87, 192–93, 381 Exchange Management Shell, 193–200 OWA access, 187–88 prerequirements, 183 public folder management, 409 database, 654 database level settings, 409, 415–16 database replication and retention settings configuration, practice exercise, 415 mail-enabled public folder settings, 412–13 permissions, 411–12 permissions configuration, practice exercise, 413–14 PowerShell scripts, 273–74 replication, 409–11, 415 Public Folder reports, 615 public folders 845 backing up, 647–72, 656 best practices, 185 collaboration, 184, 193 configuration See public folder configuration counters, 554–55 creating and mail-enabling, practice exercise, 212–14 creating and mounting, practice exercise, 210–12 creation, 200–03 disabling and removing, practice exercise, 216–17 Exchange installation, 71 hierarchy, 188–91 information retrieval, practice exercise, 215 inheritance, 201 mail-enabled, 192 management See public folder management moving, 205 permissions and replication, 200 properties modification, 203–10 removal, 200–03 replication schedule format, 204 replication troubleshooting, 654 viruses, 303 Public Folders address books, 387 /public virtual directory, 188 public vs private computer, OWA access, 89–90, 93, 109 publicfolderdatabase parameter, 187 Publishing Author client role assignment, 412 Publishing Editor client role assignment, 412 Q quarantine mailbox, 297, 627, 628–29 quarantine vs deletion, infected files, Forefront Security, 305 queue generation, 432 Queue ID filter, 437 queue type determination, 426–28 Queue Viewer, 425, 425–26, 429–30, 588 message deletion, 433–34 message filtering, 439–40, 461 queue monitoring practice exercise, 455–57 queue retry, 443–44 server report creation, 601–02, 609 queues, monitoring See mail queues, monitoring QUIT command, 570 quota messages, 204 quotas, mailbox See mailbox size limits R RAID (redundant array of independent disks), 29–30 read-only access, 412 readiness checks 846 real-time block lists EXBPA, 29, 596–98 GUI Exchange installation, 56–57 real-time block lists, 295 Real-time sampling service, HTTPMon, 475 Really Simple Syndication, 184 Receive connectors configuration, 341–347, 354, 376 creation, practice exercise, 350–51 external messages and protocol logging, 629–30 protocol log location, 561 protocol logging, 484–85, 557–58 RECEIVE event classification, 510 table display, 519 Receive mail flow messages reports, 615 Receive Queue Size counter, 446, 554 ReceiveProtocolLogPath parameter, 561 receiver/sender report creation, 621–22 RecipentLimits parameter, 249 recipient-address field, 516 recipient configuration See mail recipient configuration recipient filtering, 298, 299, 627 Recipient message tracking search filter, 509–10 recipient templates, 231 RecipientCount search field, 518 Recipients search field, 518 RecipientStatus search field, 518 RecoverCMS parameter, 58 recovering message data, 680–81, 710–11, 714, 750 backup message recovery, practice exercise, 707–09 damaged database repair, 699–706 dial tone recovery database recovery, 694–99 hard-deleted message recovery, practice exercise, 706–07 mailbox recovery, 686–89 merging and copying data, 691–94 message recovery, 681–85 RSG deletion, practice exercise, 710 storage group recovery, 689–91 recovering server roles See server role recovery recovery hard, 698–99 soft, 699 recovery drills, 721–30 Recovery Eseutil mode, 702 Recovery parameter, 692, 694 recovery storage groups (RSGs), 490, 689–91, 711, 714 creation, 692–94 Database Recovery tool, 600 deletion, practice exercise, 710 mailbox database recovery, 691 test restore, 663 Recurse parameter, 207–08, 209 public folder removal, 203 REDIRECT event classification, 510 redundancy, 29–30 redundant array of independent disks (RAID), 29–30 Reference message tracking search filter, 511, 513, 616 Reference search field, 518 registry keys backups, 655 hard-deleted message recovery, 682–83 regular expressions, message screening, 325–26 Reject filter response, 302 RejectMessagesFromDLMembers, 249 RelatedRecipientAddress search field, 518 remote access protocol, 349 remote delivery queue, 427 remote domains configuring, 85–86 out-of-office policies, 392–94 remote endpoint protocol log field, 564 Remote File Servers tab, OWA configuration, 90–91 remote IP address, Receive connectors, 344 remote procedure call (RPC) client access server role, 25 mailbox delivery queue, 427 transport process, 430 remote server Exchange Management Shell, 430 Queue Viewer connection, 429 retry queue, 444 remote wipe, 340, 373, 377 configuration, 362, 363 Remove-Mailbox cmdlet, 127, 434–35 Remove-MailContact, 137 Remove-MailUser, 133 Remove-Message cmdlet, 431, 435 Remove-PublicFolder cmdlet, 194 Remove-PublicFolderDatabase cmdlet, 199 RemoveCMS parameter, 58 Repair Database option, 600 Repair Eseutil mode, 702, 703–05 repair log files, 705 replay, 672, 698–99, 702, 714, 735 replica storage groups, backups, 650 replication, public folder management, 409–11, 415–16, 418 ReplicationSchedule parameter, 410 Report Collection Rules\Mailbox Statistics rule group, 615 Report Collection Rules\Public Folder Statistics Analysis, 615 report viewing, 491 reporting, 585 server report creation, 588, 608–09 database report creation, 599–601 scheduling EXBPA health report generation, practice exercise, 605–08 EXBPA report creation, 593–98 message queue report creation, 601–05 Reports view in Performance Logs and Alerts tool, 591–94 server availability report creation, 588–91 usage report creation, 611, 636 disconnected mailbox report creation, practice exercise, 634–35 external messages and protocol logging report creation, 630–33 mailbox report creation, 618–21 mailbox size and item count list creation, practice exercise, 634–36 MOM mailbox usage report creation, 612–16 spam message report creation, 626–30 top sender/receiver report creation, 621–22 user report creation, 616–18 virus report creation, 623–26 Reports view See Performance Logs and Alerts tool requestors, shadow-copy backup, 668–69 Require Alphanumeric Password option, 396 Require Encryption on Device option, 396 RequireSenderAuthenticationEnabled parameter, 249 RESOLVE event classification, 510 Resolve Recipient, 512–13 Resolve Sender, 512 resource booking, 170 resource DLL, 737 resource forest, mailbox moves, 228–29 resource forest scenario, 240 resource mailbox configuration, 167 custom property creation, 170 custom property creation, practice exercise, 173–74 Exchange versions, 230 resource mailbox creation, 168–69 resource mailbox modification, 169–71 resource mailbox removal, 171 room mailbox creation, practice exercise, 171–72 resource management, 168 disk, SCC, 738 system performance, 467, 469–70 usage report creation, 611 ResourceCapacity parameter, 249 restore, backup validity confirmation, 661–63, 677 Restore Eseutil mode, 702 Restore-Mailbox cmdlet, 690 Restore-StorageGroupCopy cmdlet, 733 ResultSize parameter, 514 Resume-Message cmdlet, 431, 442 Resume-PublicFolderReplication cmdlet, 410 Resume-Queue cmdlet, 431 847 Resume-StorageGroupCopy cmdlet, 733, 734 RetainDeletedItemsFor parameter, 249, 685 RetainDeltedItemsUntilBackup parameter, 249 retention period, 314 deleted items, 681–82 deleted items, configuration, 684–85 deleted mailbox recovery, 687–88 mailbox, configuring, 689 Retry Count filter, 437 retry messages, forcing, 443–45 Retry-Queue cmdlet, 431, 445 Retry Remote Delivery Queue Length counter, 554 RetryInterval parameter, 238, 242 RetryTimeout parameter, 238, 242 ReturnPath search field, 518 reverse DNS lookups, Forefront Security, 305 Reviewer client role assignment, 412 Rights Management Services, 317–18, 319, 332, 335 Rights Management Services Client with SP2, 317, 332 role configuration See administrator roles; Exchange Server 2007, role configuration /role, setup command See Setup /role command roles administrator See administrator roles removing, 97 server, selecting, 49–54 Windows Server 2008, 24–25 room mailboxes, 167 creation, 168 creation, practice exercise, 171–72 room resources, 170 round-robin DNS See DNS, round-robin routed mail item, 428 routing groups, Exchange upgrades, 13, 19 RPC over HTTP protocol Client Access server role configuration, 88 Outlook Anywhere, 108 RSGs (recovery storage groups) See recovery storage groups (RSGs) rule groups, rules, and reports, 615 RulesQuoata parameter, 249 S SAN (Storage Area Network), 470, 644–45 Scan inbound mail, Forefront Security, 304 Scan internal mail, Forefront Security, 304 Scan outbound mail, Forefront Security, 304 SCC (single copy clustering) See single copy clustering (SCC) Scheduled Task Wizard, 276 scheduling bulk management, e-mail, 274–76, 282, 286 848 Schema Admins group Command Console, 274–76 mailbox creation, practice exercise, 280–82 mailbox moves, 234–36, 245 Mailbox Wizard, 274 Schema Admins group, Schema Master, 3, 7, 16 locating, 17 schema rollback, 99, 112 SCL filter, 437 screened subnets See perimeter networks script automation, 226 scripts Exchange Management Shell, 233 PowerShell See PowerShell scripts SCW (Security Configuration Wizard) See Security Configuration Wizard (SCW) second server dial tone recovery, 695–97 Secure Socket Layer (SSL), 79 certificates, Client Access server role, 87 Client Access server recovery, 723, 729 encryption disabling, IMAP4, 370 installation, practice exercise, 73–75 offloading enabling, 88 POP3/IMAP4 configuration, 366 POP3/IMAP4 counters, 556 /public virtual directory, 188 securing communication, 65–67 self-signed certificates, 65, 112 secure string See string, secure, CSV file security account manager account name, 123 security certificates, 65–67 Security Configuration Wizard (SCW), 27–28 installation, practice exercise, 32–37 security groups, 9, 12, 150, 164 configuration, 158–60 security identifier (SID), 686 security log, 471 security logs, 470, 474 security, mobile devices, 340 seeding, 672, 734, 735 self-signed security certificates, 65, 112 Send connectors configuration, 347–48, 376 creation, practice exercise, 351–53 external messages and protocol logging, 629–30 intra-organization, protocol logging, 559–60 protocol log location, 561 protocol logging, 557–58, 558–59 SEND event classification, 510, 616 sender-address field, 516 sender filtering, 298, 299, 310, 627 configuration, practice exercise, 307–09 Sender ID status filtering, 626 Sender message tracking search filter, 510 sender/receiver report creation, 621–22 sender reputation, 299–300 sender reputation filtering, 626 Sender search field, 518 SendProtocolLogPath parameter, 561 sequence-number protocol field, 564 Server Availability\Mail Flow Verification rule group, 615 Server Availability\MAPI Logon Check and Availability reporting rule group, 615 server, Internet browsing from, 17 server load balancing, mailbox moves, 228 Server message tracking search filter, 510 Server parameter, message statistics, 541 Server parameter, public folder creation, 202–03, 206 server preparation Exchange installation preparation, 22 domain controllers, 26 Exchange Best Practices Analyzer, 28–29 multiple volumes, 29–30 networking configuration, 26–27 operating system and hardware requirements, 22–24 Security Configuration Wizard, 27–28 Security Configuration Wizard installation, practice exercise, 32–37 software component installation, practice exercise, 31–32 Windows Server 2008 roles, 24–25 server reports See reporting server resource system, 465, 497, 588 server resource systems, 588 server role configuration load balancing, 542 practice exercises, 101–08 server role recovery, 719, 721, 729–30 basic procedure, 721–22 Client Access server, 723 Edge Transport server, 725–27 Hub Transport server, 723–24 Hub Transport server installation and recovery, practice exercise, 728–29 Mailbox server, 727–28 server role selection, 49–54 Server search filter, 514 server, second, dial tone recovery, 695–97 ServerAdmin parameter, 58 ServerHostname search field, 518 ServerIp search field, 518 Service Availability report, 614 service connection point (SCP), 363 service-level agreements (SLAs), 651 soft recovery Service Pack 1, 3–4, xxv Edge Transport server installation, 59 public folders, 188 Service Pack 2, 13, 14 Service Pack 3, 13 service packs Exchange installation, 61–62 reapplying, 32 slipstreaming, 14, 32 session-id protocol log field, 564 Set-ActiveSyncMailboxPolicy cmdlet, 396–97 Set-CASMailbox cmdlet, 130, 565–68 Set-ImapSettings cmdlet, 369–370, 370, 568–69 Set-Mailbox cmdlet, 231, 245, 247, 247–48, 263, 394, 685 CSV file, 264 Set-MailboxDatabase cmdlet, 187, 245, 246, 685, 693 Set-MailboxServer cmdlet, 511, 520–21, 538, 579 message subject logging, 528–29 message tracking log file age, 527–28 message tracking log files and directory maximum size, 524–27 message tracking log location, 522 Set-MailPublicFolder cmdlet, 195, 197, 206–07, 413 Set-MailUser cmdlet, 134–35 Set-OfflineAddressBook cmdlet, 392 Set-PopSettings cmdlet, 367–68, 370, 568–69 Set-PublicFolder cmdlet, 194, 203–04, 204, 409 Set-PublicFolderDatabase cmdlet, 199 parameter limits, 205 Set-ReceiveConnector cmdlet, 558, 558–59, 560, 561, 576, 579 Set-SendConnector cmdlet, 558, 558–59, 560, 561, 576, 579 Set-TransportServer cmdlet, 511, 520–21, 538, 558, 561, 576, 579 message subject logging, 528–29 message tracking log file age, 527–28 message tracking log files and directory maximum size, 524–27 message tracking log location, 522 setup command, unattended Exchange installation, 58 Setup /mode command, 59 Setup /mode:RecoverServer, 651, 657, 658–59 Setup /mode:reinstall command, 61 Setup /mode:uninstall command, 98 Setup /mode:uninstall /roles command, 97 Setup /m:RecoverServer, 722, 724, 729 Hub Transport server role, 723–24 Mailbox server role, 727–28 Setup/ PrepareAD command, 8, 19 Setup /PrepareLegacyExchange Permissions, 19 Setup/ PrepareSchema command, 7, 19 849 Setup /role command, 59 setup.exe command, shadow copy backup, 667–72 Share Point server, 184 shared mailboxes, Exchange versions, 230 shared-nothing architecture, 737 shared storage, 737 shared vs private computer, OWA access, 89–90, 93, 109 SharePoint, 381 SharePoint Client, 193 SharePoint Designer, 184 SharePoint server, 193 SharePoint sites ActiveSync restriction, 357, 395–96 OWA configuration, 89, 93, 109, 112 shell variables, 252 Short Messaging Service (SMS), 398 SilentDelete filter response, 302 Simple Mail Transfer Protocol (SMTP) allow and block lists, 294–95 e-mail address policy, 383, 392 e-mail address specification, 132 Edge Transport configuration, 84 Exchange Server 2007 requirements, 23, 26 external messages and protocol logging, 629–30 network connectivity testing, 569–70 remote delivery queue, 427 sender reputation, 299–300 SMTP Address Identity parameter specification, 542 submission queue, 426 Telnet testing, 349, 354 transport agents, 293–94 single copy clustering (SCC), 522, 728, 730, 737, 747, 750 cluster maintenance, 739 configuration, 737–38 disk resource management, 738 storage group and database management, 738–39 site affinity, Autodiscover, 365 site folders, 190 Size (KB) filter, 437 slipstreaming, service packs See service packs, slipstreaming smart host, 348 smart parameter, 590 smart phones See mobile devices SMPT (Simple Mail Transfer Protocol) See Simple Mail Transfer Protocol (SMTP) SMS (Short Messaging Service), 398 snapshot shadow copies, 671 soft-deleted items, 681, 710 soft recovery, 699, 714 850 software requirements, Exchange Server 2007 software requirements, Exchange Server 2007, xxiv Sophos Virus Detection engine, 65 Sort & Filter function, 620 Sort-Object cmdlet, 621 SortBy parameter, 209, 620 Source IP filter, 437 Source search field, 518 SourceContext search field, 518 SourceForestGlobalCatalog parameter, 241 SourceMailboxCleanupOptions parameter, 238, 242–43, 244, 245 spam, 50, 64, 291, 611 filter, 120 filter, disabling, 453 message report creation, 626–30 postmaster mailbox, 86 quarantine, 627, 628–29 Queue Viewer, 430 spam confidence level (SCL), 297, 626–28 SQL Reporting Services, 613 SQL server, HTTPMon, 475, 633 SSL (Secure Socket Layer) See Secure Socket Layer (SSL) standard journaling, 318 Start-ClusteredMailboxServer cmdlet, 742 Start-Edge Synchronization command, 84 Start message tracking search filter, 512, 513 StartDate filter parameter, 239 Status filter, 437–38 Stop-ClusteredMailbox cmdlet, 739 Stop-ClusteredMailboxServer cmdlet, 742 Storage Area Network (SAN), 470, 644–45 storage groups, mailbox See mailbox databases and storage groups storage groups, recovery See recovery storage groups StorageLimitStatus statistic, 549 StoreEvents folder, 191 streaming files, 702 string, character, 244 string, secure, CSV file, 233 Strip filter response, 302 Subject filter, 438 Subject message tracking search filter, 511 SubjectKeywords filter parameter, 239, 242 submission queue, 426 message deletion, 432 SUBMIT event classification, 511 surname email address variable, 384 Suspend-Message cmdlet, 432, 442 Suspend-PublicFolderReplication cmdlet, 410 Suspend-Queue cmdlet, 432 Suspend-StorageGroupCopy cmdlet, 733 switches, vs hubs, 479 synchronization Edge Transport server, 84 mobile devices, 359, 372–73, 394–95 public folder, 410 System Attendant service, 186 System Center Operations Manager 2007, 589–91, 608 system folder subtree, 189–91, 217 system log, 472 System Monitor, 467–68 system performance, monitoring, 423, 464–65, 497 Best Practices Analyzer, 486–91 Event Viewer, 470 Exchange Troubleshooting Assisstant, 484–85 Exchange Troubleshooting Assistant installation, practice exercise, 492–93 hardware, 465–70 HTTPMon, 470, 474–75 message sending and replying, practice exercise, 493 message tracking, practice exercise, 493–96 Network Monitor, 478–84 Network Monitor 3, 484 PowerShell, 470, 475–77 System State, backups, 655–56 SystemFolderPath parameter, 692 T Task Manager, 467 TC/IP, port 50636, 84 TCP ports Direct Push support, 363 POP3, 366 Telnet, 349 telephone, Unified Messenger server role, 53 Telnet SMTP communication testing, 349, 354, 570 practice exercise, 353 Template variable, 233 TemplateInstance parameter, 233 Terminal Service Servers, MOM server report creation, 589 Test-ExchangeSearch cmdlet, 399–400, 406 test restore, backup, 661–63 text editors, 118, 268 batch file creation, 275–76 CSV file creation, 251, 277 Thomas, Orin, 2, 48, 292, 340, 382, 720 threshold monitoring, mail queue, 445–49 thresholds, performance, 467–70 Thunderbird mail clients, public folders, 187 time-outs IMAP4 settings, 369–70 POP3 settings, 364 Timestamp search field, 518 Top 100 Mailboxes (by size) report, 614, 618 wildcards Top Receivers/Senders reports, 621–22 top users (mailbox), 611–12, 613–14 Total connections counter, 557 TotalBytes, 518 tracert command, 570 transaction log files, 489–90 backups, 652–53, 656 hard recovery, 698–99 soft recovery, 699 TRANSFER event classification, 511 transport agents, 293–94 transport compliance See compliance transport dumpster, 234, 240 Transport Layer Security (TLS), 342 authentication, 345 POP3 and IMAP4 counters, 556 transport mail item, 428 transport process, 430 transport rules, 316, 332 configuration, 320–25, 336 configuration, practice exercise, 328–29 transport servers, Forefront Security recanning, 304 Transport service, restarting, Forefront Security installation, 77 trusted authorities, SSL certificates, 66 U UDP (User Datagram Protocol), POP3, 366 unattended Exchange installation, 57–59 uncoded files, corrupt, Forefront deleteion, 304 Unicode, report generation, 605 Unified Messaging server role, 49, 53, 79 Autodiscover, 363–64 backup jobs, 659–60, 661 mailbox property setting, 128 message tracking log, 508 setup command abbreviations, 59 Windows Server 2008, 25 universal distribution groups, 164, 177 creation, 151–52 universal security groups, 150 unknown server setting, OWA configuration, 90 Unreachable queue, 428, 602 unti types, message tracking file log size, 525 Update-OfflineAddressBook cmdlet, 392 Update-PublicFolder cmdlet, 194 Update-StorageGroupCopy cmdlet, 733, 736 updates, Exchange installations, 61–62 UpdatesDir parameter, 58 UpgradeCMS parameter, 58 usage report creation See reporting Usage Type parameter, 342–43 851 UseDatabaseQuotaDefaults parameter, 249 UseDatabaseReplicationSchedule parameter, 409 UseDatabaseRetentionDefaults, 249 User Datagram Protocol (UDP), POP3, 366 User Logon Name, 121–22, 131 user name theft, OWA configuration, 91–92 User principal name Identity parameter specification, 542 user role assignment Exchange postinstallation, 62–63 practice exercise, 71–72 UTC See Coordinated Universal Time (UTC) UTF7, report generation, 605 UTF8, report generation, 605 V variables $_, 252 e-mail address, 384–85 verification, backup, 661–63 Verify Database and Transaction Log Files option, 600 versioning, 184, 185 ViewInformationStore role assignment, 412 virtual directories, custom, 723 virtual machines Exchange installation preparation and, rollbacks and snapshots, 67 unattended Exchange installation, 57 virtual private network (VPN), POP3 settings, 368 Virus Buster Antivirus engine, 65 Virus Incidents log, 624–26 duplicate incidents, 626 Virus Log, 626 virus report creation, 623–26 viruses, 50, 64, 291, 611 third-party protection, 623 volume configuration, Mailbox server role recovery, 727–728, 730, 750 Volume Shadow Copy Service (VSS) backup, 643, 648–50, 667–71 VPN (virtual private network), POP3 settings, 368 W Warning events, 470 Web-based Distributed Authoring and Versioning, 193 Web sites and Web servers, monitoring, 470 weighted words filtering, 626 Where-Object cmdlet, 631 whitelists See allow list wildcards message filtering, 441 852 Windows Cluster service message tracking, 518 Windows Cluster service, 54, 734–35, 737 Windows File Shares, access blocking, 395–96 Windows logs, 471–73 Windows Management Instrumentation (WMI), 475 Windows Media Audio Voice Codec, Unified Messenger server role, 25 Windows Media Encoder, Unified Messenger server role, 25 Windows Mobile 5.0, 89 Autodiscover compatibility, 364 Direct Push compatibility, 361 mobile device policy setting, 394–95 Windows Mobile 6.0 Autodiscover compatibility, 364 Direct Push compatibility, 361 mobile device policy setting, 394–95 Windows mobile devices, Exchange Server 2007 synchronization, 359 Windows NLB cluster See network load balancing (NLB) Windows PowerShell See PowerShell Windows registry, backups, 656 Windows Rights Management Services See Rights Management Services Windows Server 2003 32-bit vs 64-bit, Exchange installation preparation and, 2, 3–4, 23, 39, xxiii attack surface, 27–28 backing up, 647 clustering, 52 configuration for practice Exchange installation preparation, 13–14 functional levels, 4–5, service packs, Exchange installation, 61–62 updates, Exchange installation, 61–62 updates, Exchange Server 2007 requirements, 23 Windows Server 2008 32-bit vs 64-bit, Exchange installation preparation and, xxiii backing up, 647 clustering, 52 features, 24 functional levels, roles, 24–25 service packs, Exchange installation, 61–62 updates, Exchange installation, 61–62 Windows Server Resource Kit, 470 Windows Vista Business, xxiii Windows Vista Enterprise, xxiii Windows Vista Ultimate, xxiii Windows XP Professional, xxiii WithNDR parameter, 435 WMI (Windows Management Instrumentation), 475 World Wide Web service Client Access server role, 25 Mailbox server role, 25 writers, shadow-copy backup, 668–69 written policies, 314 X X.400 e-mail address types, 132 x64 architecture, Exchange Server 2007, 24 XML (Extended Markup Language) report lists, 594 XML file, cloned Edge Transport server configuration, 60 System Requirements We recommend that you use an isolated network that is not part of your production network to the practice exercises in this book The computer that you use to perform practices requires Internet connectivity It is possible to perform all the practices in this training kit if you decide to use a single computer that is configured as a domain controller and has Exchange Server 2007 installed Both the Windows Server and Exchange Server software need to be 64-bit editions Hardware Requirements Your computer or computers should meet (at a minimum) the following hardware specification: ■ Personal computer with a 1-GHz or faster 64-bit processor ■ 1.5 GB of RAM (2 GB if you plan to use virtual machine software) ■ 60 GB of available hard disk space (100 GB if you plan to use virtual machine software) ■ DVD-ROM drive ■ Keyboard and Microsoft mouse or compatible pointing device ■ The practices in Chapter 12, “Disaster Recovery,” require a second hard disk, either internal or external You can carry out the practices by using a high-capacity USB flash memory device (4 GB or greater), but the practices are closer to real life if you use a hard disk ■ Note that while the current edition of Microsoft Virtual PC and Virtual Server not support 64-bit guest operating systems, third-party virtual machine host software such as VMware Server does You must ensure that your processor’s virtualization extensions are enabled when attempting to run 64-bit guest operating systems Software Requirements The following software is required to complete the practice exercises: ■ An evaluation or full edition Windows Server 2003, Windows Server 2003 R2, or Windows Server 2008 64-bit Enterprise Edition ■ An evaluation or full edition of Windows Exchange Server 2007 853 Exam 70-623: Configuring Microsoft Exchange Server 2007 Objective Location in Book Installing and Configuring Microsoft Exchange Servers Prepare the infrastructure for Exchange installation Chapter 1, Lesson Prepare the servers for Exchange installation Chapter 1, Lesson Install Exchange Chapter 2, Lesson Configure Exchange server roles Chapter 2, Lesson Configuring Recipients and Public Folders Configure recipients Chapter 3, Lesson Configure mail-enabled groups Chapter 3, Lesson Configure resource mailboxes Chapter 3, Lesson Configure public folders Chapter 4, Lesson Move mailboxes Chapter 5, Lesson Implement bulk management of mail-enabled objects Chapter 5, Lesson Configuring the Exchange Infrastructure Configure connectors Chapter 7, Lesson Configure the antivirus and anti-spam system Chapter 6, Lesson Configure transport rules and message compliance Chapter 6, Lesson Configure policies Chapter 8, Lesson Configure public folders Chapter 8, Lesson Configure client connectivity Chapter 7, Lesson Monitoring and Reporting Monitor mail queues Chapter 9, Lesson Monitor system performance Chapter 9, Lesson Perform message tracking Chapter 10, Lesson Monitor client connectivity Chapter 10, Lesson Create server reports Chapter 11, Lesson Create usage reports Chapter 11, Lesson Configuring Disaster Recovery Configure backups Chapter 12, Lesson Recover messaging data Chapter 12, Lesson Recover server roles Chapter 13, Lesson Configure high availability Chapter 13, Lesson Exam objectives The exam objectives listed here are current as of this book’s publication date Exam objectives are subject to change at any time without prior notice and at Microsoft’s sole discretion Please visit the Microsoft Learning Web site for the most current listing of exam objectives: http://www.microsoft.com/learning/mcp/ ... manage Microsoft Exchange Server 2007 ■ Manage messaging security by using Exchange Server 2007 ■ Recover messaging servers and databases by using Exchange Server 2007 ■ Monitor and troubleshoot Exchange. .. follow these steps: Click Start/All Programs /Microsoft Press Training Kit Exam Prep A window appears that shows all the Microsoft Press training kit exam prep suites installed on your computer... to Microsoft Press by using either of the following methods: E-mail: tkinput @microsoft. com Postal Mail: Microsoft Press xxviii Introduction Attn: MCTS Self-Paced Training Kit (Exam 70-236): Configuring